
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4299dbea-9279-38e8-8f15-e7cb3e998592.roa
File: 4299dbea-9279-38e8-8f15-e7cb3e998592.roa (raw, json)
Hash identifier: 6F/fOnlNfrM+Xz/oOAuTOHJCJlMtlhoryxBLAmcYB6g=
Subject key identifier: 68:1B:4F:29:C5:5A:9C:FF:C5:A3:E4:5C:48:41:08:40:27:AD:99:F4
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584DAD98082A809D223BE4913980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4299dbea-9279-38e8-8f15-e7cb3e998592.roa
Signing time: Thu 30 Apr 2026 12:22:45 +0000
ROA not before: Thu 30 Apr 2026 12:22:45 +0000
ROA not after: Wed 29 Jul 2026 12:22:45 +0000
asID: 6079
IP address blocks: 64.205.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:98:08:2a:80:9d:22:3b:e4:91:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Apr 30 12:22:45 2026 GMT
Not After : Jul 29 12:22:45 2026 GMT
Subject: CN=a3955189-35c9-43de-bc9a-628b345be544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:13:7f:68:d9:cb:be:d6:d4:6c:5b:ba:75:
57:0b:e3:69:8c:40:8e:a4:c0:ea:65:d6:e3:f5:5b:
30:63:60:dd:84:cd:04:10:09:dd:92:87:fe:ca:7b:
8e:04:cf:be:51:cf:94:36:24:74:c1:a9:9f:cd:e6:
24:a3:52:9e:51:91:e3:3d:21:7b:cf:52:e4:f7:da:
ec:f3:dd:8b:a9:4d:bf:f9:47:8c:45:18:32:0b:9e:
8a:ef:af:3f:83:b4:81:1f:c0:64:49:95:ba:20:26:
26:79:17:97:61:49:13:45:5b:a5:46:2e:c5:d1:79:
4f:c7:2b:2f:c3:4a:92:74:f5:d3:60:d9:c8:56:1e:
18:37:7c:26:d1:32:be:02:55:ef:ff:d2:59:cf:61:
5a:58:81:ef:6c:46:ca:1f:d7:4b:5c:90:e3:5a:71:
10:11:73:c8:40:53:6b:cd:6f:22:57:d0:dd:eb:3b:
13:dc:41:c9:78:a0:18:92:1c:ef:aa:90:42:f8:2f:
c0:6e:5a:60:36:ff:1b:45:ea:f5:91:46:fe:36:f8:
22:b0:82:b7:b6:3a:99:c6:b7:24:2c:68:2b:89:25:
45:72:28:f2:54:05:4f:3d:96:4c:89:b5:83:15:88:
87:ec:27:b1:aa:50:a1:17:79:09:dc:7b:7c:bb:a1:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1B:4F:29:C5:5A:9C:FF:C5:A3:E4:5C:48:41:08:40:27:AD:99:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4299dbea-9279-38e8-8f15-e7cb3e998592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.205.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:8d:e5:0c:52:9b:c9:e9:cc:1f:fd:58:fa:f2:1a:97:12:20:
bc:33:7d:10:2d:a9:82:0c:cc:6b:46:82:62:bb:fa:f3:e6:34:
ee:2c:16:2c:1e:c5:44:a9:f6:0c:87:2a:ba:06:f7:70:f9:52:
83:a9:8a:09:fa:ca:7c:95:c0:f0:ea:d1:64:31:a2:43:47:f9:
cf:61:de:d1:63:6f:de:b3:26:b1:ab:3d:7e:ef:57:44:94:cb:
f8:67:4e:4b:52:ad:c3:ef:99:e8:f0:ff:e7:ef:00:9d:2b:cf:
cd:5f:62:17:55:83:03:ec:51:4d:d7:12:5b:0c:79:88:12:51:
2b:3e:e7:a1:1f:95:cf:6b:c6:65:f3:5f:6b:1b:f2:75:cd:e5:
7b:3b:a2:b5:17:b2:1b:8b:4d:3a:9e:32:1e:96:56:3f:25:05:
0c:37:f7:9e:9f:eb:17:c2:f1:ca:c0:3d:64:d4:02:15:dd:1a:
13:b1:ec:23:15:5b:b5:df:dc:e2:25:dd:27:44:0e:4a:c3:c6:
3e:31:a1:df:e1:b6:56:1c:c8:b9:5f:22:97:7e:cb:76:45:0a:
d6:ca:9f:f9:6e:7d:87:3b:0d:a5:af:77:0b:1f:78:d5:77:0e:
f4:37:48:8e:76:95:b9:c8:dc:39:13:c0:a7:d8:db:d3:48:72:
17:e7:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:44 2026 by rpki-client